English Amiga Board

English Amiga Board (https://eab.abime.net/index.php)
-   support.Other (https://eab.abime.net/forumdisplay.php?f=74)
-   -   SCA Strain? (https://eab.abime.net/showthread.php?t=41851)

Supamax 08 January 2009 00:40

SCA Strain?
 
Hi,

I have two physical disks (Speed! and Mindshadow; I uploaded them to The Zone) with a strange bootblock.
X-Copy Professional v8.5 says they are infected with the "SCA Strain", but I compared their bootblock with a normal "bootable" bootblock and the difference is only 38 bytes.
Is this a real virus?? I doubt it!
If not, it's strange that the bootblock is "partially" infected (the first bytes)...

But, if it's not a virus, why do I have it on 2 different floppies/games?

JordanS28 08 January 2009 01:27

Actually its just a standard install from a program called CLI-Manager. (had a look at the ADFs you put in the zone)

jasonver2.0 08 January 2009 14:44

If you look at a byte display of the bootblock, the "CHW!" is what is has in common with an SCA, so thats what X-Copy must looks for. The rest is almost identical to whats in a standard 1.3 install

Supamax 08 January 2009 17:13

Quote:

Originally Posted by JordanS28 (Post 496679)
Actually its just a standard install from a program called CLI-Manager

WOW! I wonder how did you discover it? :shocked
Do you remember all the bootblocks? :bowdown

Quote:

Originally Posted by jasonver2.0 (Post 496826)
If you look at a byte display of the bootblock, the "CHW!" is what is has in common with an SCA, so thats what X-Copy must looks for. The rest is almost identical to whats in a standard 1.3 install

Yes, I saw the bootblock (with UltraEdit-32) and imagined it.
But what was bugging me was the strange fact it was only 38 bytes different from a normal bootblock :)
I thought it could be some form of super-compact SCA-type virus variant.

JordanS28 09 January 2009 02:20

The reason i found this out is due to the fact I co-authoured with jasonver2.0 the Amiga Bootblock reader program on http://eab.abime.net/showthread.php?t=39978.
(sorry for the shameless plug!)

It interesting as the CLI-Manager program also installs an anti-virus which is now considered a virus (CLI-Manager virus).


All times are GMT +2. The time now is 03:44.

Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2024, vBulletin Solutions Inc.

Page generated in 0.04345 seconds with 10 queries